Static task
static1
Behavioral task
behavioral1
Sample
85caa041792a570d357e6488f7e27ebf636aef5e7247da400b931342e9889f56.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
85caa041792a570d357e6488f7e27ebf636aef5e7247da400b931342e9889f56.exe
Resource
win10v2004-20240226-en
General
-
Target
85caa041792a570d357e6488f7e27ebf636aef5e7247da400b931342e9889f56
-
Size
65KB
-
MD5
1b139c07f33d01630e62408484d5a2ed
-
SHA1
861833c7f4e9a7be83f3cb197dead645a66ec5db
-
SHA256
85caa041792a570d357e6488f7e27ebf636aef5e7247da400b931342e9889f56
-
SHA512
56303e2894e6c51bde1be516c34ea877e939afd784f8eb8828236931ed7222362fbe1975d9c27b05b1da8f78e8286d8d093ac6c1503cdaf955c1deb16183aa69
-
SSDEEP
768:ArOb1QF5kMtFC9LuryNzZHvAe5d/LfWOf01+tLNQGVAbOuf19jbEpDWIajDsXPh9:NB+FC9RntfWeoGiPyCHjKDjfQQQtUe3S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85caa041792a570d357e6488f7e27ebf636aef5e7247da400b931342e9889f56
Files
-
85caa041792a570d357e6488f7e27ebf636aef5e7247da400b931342e9889f56.exe windows:1 windows x86 arch:x86
17a4bd9c95f2898add97f309fc6f9bcd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
Sections
.bss Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewSec Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE